300-415 · Question #371
What is the next step when the WAN Edge device boots up and resolves the domain in the ZTP process for WAN Edge deployment?
The correct answer is B. The WAN Edge router authenticates to the vBond orchestrator with the chassis serial number and root certificate. This question asks for the immediate next step in the Zero Touch Provisioning (ZTP) process after a WAN Edge device has booted and resolved its domain.
Question
Options
- AThe WAN Edge device establishes secure connections with the vManage and vSmart and downloads the configuration using NETCONF.
- BThe WAN Edge router authenticates to the vBond orchestrator with the chassis serial number and root certificate.
- CThe WAN Edge device establishes secure control plane connections with the controllers and secures data plane connections in the SD-WAN overlay network.
- DThe WAN Edge device learns the vBond and organization name from the configuration and initiates a secure control connection to the vBond orchestrator.
How the community answered
(42 responses)- A5% (2)
- B90% (38)
- C2% (1)
- D2% (1)
Why each option
This question asks for the immediate next step in the Zero Touch Provisioning (ZTP) process after a WAN Edge device has booted and resolved its domain.
Establishing secure connections with vManage and vSmart and downloading configuration happens after the initial authentication and setup with vBond.
Following domain resolution during ZTP, the WAN Edge device proceeds to authenticate itself with the vBond orchestrator. This authentication uses the device's unique chassis serial number and a pre-installed root certificate to verify its identity and authorize it to join the SD-WAN overlay.
Establishing secure control and data plane connections is the overarching goal of ZTP but occurs in stages, with vBond authentication being an earlier, prerequisite step.
The WAN Edge device typically learns the vBond address through DNS resolution, and the organization name is learned during ZTP, but initiating the secure control connection to vBond, which includes authentication, is the direct next action after domain resolution for initial bootstrapping.
Concept tested: ZTP process - vBond authentication
Source: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-release-17/edge-device-deploy/sdwan-edge-deploy-book-xe/sdwan-wan-edge-deployment-ztp.html
Topics
Community Discussion
No community discussion yet for this question.